Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/net.mingsoft/ms-mcms@5.4.5
purl pkg:maven/net.mingsoft/ms-mcms@5.4.5
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.8
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-wvv5-5g6x-hp7j
Aliases:
CVE-2025-60837
MCMS reflected cross-site scripting (XSS) vulnerability A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary … There are no reported fixed by versions.
GHSA-r9wp-qq53-qvjx
Aliases:
CVE-2026-2666
mingSoft MCMS does not properly restrict file uploads A flaw has been found in mingSoft MCMS 6.1.1. The affected element … There are no reported fixed by versions.
This package is not known to fix any advisories.